Mid Western Tethered Rapid Surfing: Fwd: NIST Advisory Group Releases Report on Cryptography Expertise and Standards Process

Monday, July 21, 2014

Fwd: NIST Advisory Group Releases Report on Cryptography Expertise and Standards Process

---------- Forwarded message ----------
From: National Institute of Standards and Technology (NIST) <subscriptions@nist.gov>
Date: Mon, Jul 14, 2014 at 1:46 PM
Subject: NIST Advisory Group Releases Report on Cryptography Expertise and Standards Process
To: iammejtm@gmail.com

This e-mail update was generated automatically based on your subscriptions. Some updates may belong to more than one topic, resulting in duplicate notices.

You are subscribed to Information Technology for National Institute of Standards and Technology (NIST).

This information has recently been updated, and is now available.

NIST Advisory Group Releases Report on Cryptography Expertise and Standards Process

07/14/2014 12:21 PM EDT

The National Institute of Standards and Technology (NIST)'s primary external advisory board today released a report calling for the agency to increase its staff of cryptography experts and implement more explicit processes for ensuring openness and transparency to strengthen its cryptography efforts. The Visiting Committee on Advanced Technology (VCAT) report also highlights the importance of having the trust and participation of the broader cryptographic community in NIST's program.

In the fall of 2013, former NIST Director Patrick D. Gallagher requested that the VCAT review NIST's cryptographic standards and guidelines development process, in response to community concerns that a cryptographic algorithm in a NIST standard had been deliberately weakened.

In making its recommendations, the VCAT specifically addressed NIST's interactions with the National Security Agency (NSA). The report states, "NIST may seek the advice of the NSA on cryptographic matters but it must be in a position to assess it and reject it when warranted."

"Ensuring we have a process that delivers strong cryptography and protects the integrity of our standards and guidelines is our highest priority," said Acting NIST Director Willie May. "We appreciate this review by the VCAT and the individual Committee of Visitor experts. NIST has already taken several steps to strengthen the process for developing cryptographic standards and will carefully consider these recommendations."